Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File: WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier: u9ilN7iNs8KQkvlC/sO8QuDqD3J+scIp4JUMB2y3Yug=
Subject key identifier: 9C:87:1E:03:7F:D0:C3:71:FD:B9:61:3F:78:76:4F:0E:60:6E:26:CA
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer: /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial: 0194BABB6FD8C91F2BDB6638D0EAAE7E379E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number: 1136
Signing time: Fri 31 Jan 2025 05:00:33 +0000
Manifest this update: Fri 31 Jan 2025 05:00:33 +0000
Manifest next update: Sat 01 Feb 2025 05:00:33 +0000
Files and hashes: 1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: S7sULcHBxQSe+kdvC04iCE0LWVDv6SdK42TxzveOIbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:6f:d8:c9:1f:2b:db:66:38:d0:ea:ae:7e:37:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Validity
Not Before: Jan 31 05:00:33 2025 GMT
Not After : Feb 1 05:00:33 2025 GMT
Subject: CN=9c871e037fd0c371fdb9613f78764f0e606e26ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:0c:66:e5:3c:7a:f9:0e:13:63:76:5f:56:
67:00:0f:e8:b2:34:69:26:7c:ea:07:b3:9d:8b:11:
2b:87:a8:0a:41:8f:5c:75:5e:a8:54:1a:56:71:f6:
a6:fb:83:ad:df:23:d3:c1:35:29:18:2c:39:d8:b4:
50:10:a4:04:76:f5:86:90:42:1d:a5:48:7d:01:98:
a5:9e:81:e2:a8:a0:37:af:94:95:fb:d3:a5:87:9b:
48:b0:ee:fc:51:cc:0b:40:6e:be:d3:99:04:09:69:
bb:26:83:2d:46:d0:70:fe:ac:80:ff:5e:ba:e7:45:
32:62:26:2d:8a:11:16:58:09:cd:80:28:b6:49:d0:
23:b2:60:6d:ca:6d:cc:e2:c0:fd:95:21:e2:82:61:
f9:ec:c5:88:9d:24:89:63:13:49:d6:5f:19:78:12:
91:dd:e9:cf:4e:70:fd:94:da:69:12:fb:c9:15:47:
61:92:85:03:e9:de:0c:2e:19:15:91:64:0a:63:77:
9e:40:9e:2d:a8:6d:65:94:a0:c7:c4:32:af:96:ef:
f8:dd:76:78:1d:97:42:ed:42:bb:ec:e6:41:6d:ac:
8a:c5:01:bd:8c:58:ea:fa:67:42:d6:ff:0e:89:ea:
73:09:f9:a4:bf:bb:52:1f:5c:86:db:8c:5c:f7:e2:
51:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:1E:03:7F:D0:C3:71:FD:B9:61:3F:78:76:4F:0E:60:6E:26:CA
X509v3 Authority Key Identifier:
keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:aa:37:d0:f7:63:2c:32:10:f4:c4:10:91:4a:f0:00:16:ae:
8e:49:fd:65:59:57:22:63:c5:82:9f:e9:4b:c3:70:0a:e0:ff:
22:66:fc:a3:f0:54:7d:b8:de:51:77:01:c7:d7:26:28:a7:6d:
a0:22:ce:22:ae:d7:5d:0a:28:b4:c7:2b:d9:7e:dc:d3:da:31:
55:22:42:b5:20:92:a3:41:b8:bd:ca:da:c6:71:9e:72:e7:18:
64:e2:3a:64:04:d7:5c:df:29:89:6f:db:af:c9:0b:aa:17:9e:
8f:52:ee:bd:cd:8e:da:32:43:dd:4d:09:b9:4a:d2:70:2b:25:
10:6b:1a:b7:18:3a:89:45:b2:23:4c:ae:31:91:84:1b:2d:06:
4c:7d:12:18:1d:1b:24:2b:aa:3c:87:16:0e:38:5b:42:65:0d:
b2:cc:ab:45:19:3a:1d:61:e8:c2:23:bb:a1:cf:79:ef:eb:91:
00:c6:76:d7:34:00:05:8d:3c:dc:b2:9c:e9:d4:66:db:d9:a9:
f3:6f:f7:4d:ed:a2:b9:27:9f:a5:ce:4f:cf:e9:19:5b:a4:f4:
f5:d9:7a:5a:ee:76:6c:2d:6b:54:ae:07:fc:97:57:00:fe:25:
76:d8:4d:96:17:18:c2:ac:a4:6d:7c:57:7a:f7:73:e5:ef:58:
e0:3a:4b:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u2/YyR8r22Y40OqufjeeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDYzMGI2MWQyZTcyOTJmOWNlZjg5M2JiNmQ3MTI0MmE1
ZjRiZWQwHhcNMjUwMTMxMDUwMDMzWhcNMjUwMjAxMDUwMDMzWjAzMTEwLwYDVQQD
Eyg5Yzg3MWUwMzdmZDBjMzcxZmRiOTYxM2Y3ODc2NGYwZTYwNmUyNmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEgMZuU8evkOE2N2X1ZnAA/osjRp
JnzqB7OdixErh6gKQY9cdV6oVBpWcfam+4Ot3yPTwTUpGCw52LRQEKQEdvWGkEId
pUh9AZilnoHiqKA3r5SV+9Olh5tIsO78UcwLQG6+05kECWm7JoMtRtBw/qyA/166
50UyYiYtihEWWAnNgCi2SdAjsmBtym3M4sD9lSHigmH57MWInSSJYxNJ1l8ZeBKR
3enPTnD9lNppEvvJFUdhkoUD6d4MLhkVkWQKY3eeQJ4tqG1llKDHxDKvlu/43XZ4
HZdC7UK77OZBbayKxQG9jFjq+mdC1v8OiepzCfmkv7tSH1yG24xc9+JRqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJyHHgN/0MNx/blhP3h2Tw5gbibKMB8GA1UdIwQY
MBaAFFrWMLYdLnKS+c74k7ttcSQqX0vtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RZd3RoMHVjcEw1enZpVHUyMXhKQ3BmUy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8yYjc1NzYtMmUwZC00NjFjLTliODkt
MGU0ZjBhMzk0MTIzLzEvV3RZd3RoMHVjcEw1enZpVHUyMXhKQ3BmUy0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8yYjc1NzYtMmUwZC00NjFjLTliODktMGU0ZjBhMzk0MTIz
LzEvV3RZd3RoMHVjcEw1enZpVHUyMXhKQ3BmUy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfao30Pdj
LDIQ9MQQkUrwABaujkn9ZVlXImPFgp/pS8NwCuD/Imb8o/BUfbjeUXcBx9cmKKdt
oCLOIq7XXQootMcr2X7c09oxVSJCtSCSo0G4vcraxnGecucYZOI6ZATXXN8piW/b
r8kLqheej1Luvc2O2jJD3U0JuUrScCslEGsatxg6iUWyI0yuMZGEGy0GTH0SGB0b
JCuqPIcWDjhbQmUNssyrRRk6HWHowiO7oc957+uRAMZ21zQABY083LKc6dRm29mp
82/3Te2iuSefpc5Pz+kZW6T09dl6Wu52bC1rVK4H/JdXAP4ldthNlhcYwqykbXxX
evdz5e9Y4DpLwg==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:38:45 2025 by rpki-client on console-fra.rpki-client.org